VDB
CVE-2026-56684
CVE-2026-56684
PUBLISHED
CVSS 7.5 HIGH
Reported by GitHub_M · Published August 18, 2026
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| valkey-io | valkey | < 7.2.14, >= 8.0.0, < 8.0.10, >= 8.1.0, < 8.1.9 |
| valkey-io | valkey | < 7.2.14, >= 8.0.0, < 8.0.10, >= 8.1.0, < 8.1.9 |
Timeline
- Jul 26, 2026 CVE Published
References
- https://github.com/valkey-io/valkey/security/advisories/GHSA-53mc-f3m3-99vh x_refsource_CONFIRM
- https://github.com/valkey-io/valkey/pull/4234 x_refsource_MISC
- https://github.com/valkey-io/valkey/commit/7cd5bcb7575d750ec2de618db80da58680a10fe3 x_refsource_MISC
- https://github.com/valkey-io/valkey/releases/tag/7.2.14 x_refsource_MISC
- https://github.com/valkey-io/valkey/releases/tag/8.0.10 x_refsource_MISC
- https://github.com/valkey-io/valkey/releases/tag/8.1.9 x_refsource_MISC
- https://github.com/valkey-io/valkey/releases/tag/9.0.5 x_refsource_MISC
- https://github.com/valkey-io/valkey/releases/tag/9.1.1 x_refsource_MISC